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Top Stories 

• Crews plugged an Oasis Petroleum North America LLC -owned well in North Dakota 
October 20 and recovered about 483,000 gallons of spilled crude oil and saltwater from the 
well site. - Associated Press (See item 1) 

• Five former employees were charged in Tennessee October 20 for their alleged 
involvement in a scheme that defrauded FedEx of more than $1.7 million. - U.S. 

Attorney’s Office, Western District of Tennessee (See item 7) 

• Fire officials reported October 18 that the Sun-Re Cheese Co., in Pennsylvania halted 
production indefinitely after an accidental fire caused at least $3 million in damages. - 
Sunbury Daily Times (See item 12) 

• An October 20 liquid bleach spill at a YMCA in Santee, California, caused 81 students and 
adults to be transported to area hospitals for treatment following complaints of a chemical 
smell and burning sensation in their eyes. - San Diego Union-Tribune (See item 18) 
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Energy Sector 



1. October 21, Associated Press - (North Dakota) Workers cap out-of-control North 
Dakota oil well. Crews plugged an Oasis Petroleum North America LLC-owned well 
near White Earth in North Dakota October 20 and recovered about 483,000 gallons of 
crude oil and saltwater from the well site that began leaking the weekend of October 
17. The cause of the spill is under investigation but regulators believe that the breach 
may have been caused by hydraulic fracturing operations at a nearby well that was 
being drilled. 

Source: http://www.wahpetondailvnews.com/workers-cap-out-of-control-north-dakota- 
oil-well/article 88ab25f2-7769-l Ie5-856e-cfe75a28bc44.html 



Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

2. October 21, Kalamazoo Gazette - (Michigan) Palisades nuclear plant returns to 
service after maintenance. Entergy-owned Palisades Nuclear Plant in Michigan 
returned to service October 19 after investing $58 million in upgrades and inspection of 
equipment, and $63 million in new fuel in an effort to provide more robust defenses 
against events such as tornadoes, flooding, and earthquakes following a September 16 
shut down. The U.S. Nuclear Regulatory Commission returned Palisades Nuclear Plant 
to the agency’s highest safety category. 

Source: http://www.mlive.com/news/kalamazoo/index.ssf/2015/10/palisades nuclear p 
lant return 4.html 

3. October 21, Associated Press - (Virginia) Nuke units shut down at Surry Power 
Station. A Dominion Virginia Power official reported October 20 that both nuclear 
units at its Surry Power Station located in Richmond were shut down after a generator 
problem triggered sensors that caused the first unit to shut down the week of October 
12 and a scheduled refueling caused the second unit to shut down October 19. 
Authorities reported that three large pumps and three main transformers will be 
replaced and that Dominion Power will have sufficient power available while the units 
are down. 

Source: http://delmarvapublicradio.net/post/nuke-units-shut-down-surrv-power- 
station#stream/Q 



Critical Manufacturing Sector 

4. October 21, Bloomberg News - (International) Toyota recalls 6.5 million cars to fix 
power window switch. Toyota Motor Corp., announced plans October 21 to recall 
about 2.7 million Camry, Highlander, and RAV4 vehicles in North America due to an 
issue with power-window switches in which inconsistent greasing could cause switches 
to overheat, posing a potential burn hazard. The vehicles were produced between 2005 
- 2006 and 2009 - 2010. 
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Source: http://www.bloomberg.com/news/articles/2015-10-21/tovota-recalls-6-5- 
million-vehicles-for-melting- window-switch 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

Nothing to report 

Transportation Systems Sector 

5. October 21, Washington Post - (New Mexico) 4-year-old girl dead after 
Albuquerque road-rage shooting. Interstate 40 West in Albuquerque was shut down 
for 6 hours October 20 while officials investigated the death of a 4-year-old girl after 
gunfire erupted on the highway during a confrontation fueled by road rage. An 
investigation into the incident is ongoing. 

Source: http://www.washingtonpost.corn/news/morning-mix/wp/2015/10/21/4-vear- 
old-girl-dead-after-albuquerque-road-rage-shooting/ 

6. October 21, KNBC 4 Los Angeles - (California) 210 Freeway shut down after big rig 
overturns. A section of the 210 Freeway near the 2 Freeway in California was shut 
down for approximately 6 hours October 21 while crews cleared the roadway after a 
semi-truck hauling celery and lettuce overturned and spilled 80,000 pounds of produce. 
One person was treated for minor injuries at the scene and no other vehicles were 
involved in the accident. 

Source: http://www.nbclosangeles.com/news/tocal/210-Freewav-Shut-Down-Big-Rig- 
Overturns-334959801 .html 

7. October 20, U.S. Attorney’s Office, Western District of Tennessee - (National) Former 
FedEx hub employees indicted in million-dollar shipping theft scheme. Five former 
FedEx employees were charged in Memphis October 20 for their alleged involvement 
in a scheme that defrauded FedEx of more than $1.7 million from 2013-2014 through 
interstate shipping of stolen wireless mobile devices from Verizon and AT&T. 

Source: https://www.fbi.gov/memphis/press-releases/2015/former-fedex-hub- 
employees-indicted-in-million-dollar-shipping-theft-scheme 

8. October 20, KPIX 5 San Francisco; Associated Press - (Arizona) Unruly passenger 
on San Jose - Dallas flight prompts emergency landing. An American Airlines flight 
headed to Dallas-Fort Worth from San Jose was diverted to Sky Harbor International 
Airport in Phoenix after an unruly passenger became disruptive and was restrained 
October 20. 

Source: http://sanfrancisco.cbslocal.com/2015/10/20/unrulv-passenger-american- 
airlines-2232-san-iose-dallas-phoenix/ 

9. October 20, San Antonio Express-News - (Texas) Interstate 10 shut down due to 



- 3 - 



fatal motorcycle crash. All westbound lanes of Interstate 10 in Northwest Bexar 
County were shut down for approximately 8 hours October 20 while crews cleared the 
scene of a chain-reaction accident after a motorcyclist crashed into a vehicle towing a 
boat, causing a semi-truck to crash into the boat, overturn, and block the highway. The 
motorcyclist was pronounced dead at the scene. 

Source: http://www.mvsanantonio.com/news/local/article/Interstate-10-shut-down-due- 
to-fatal-crash-6578998.php 

Food and Agriculture Sector 

10. October 20, U.S. Food and Drug Administration - (National) Northwest Wild 
Products is issuing a voluntary recall on all canned seafood products because of a 
possible health risk. Astoria, Oregon-based Northwest Wild Products expanded its 
October 19 recall of all canned black cod, salmon, sardines, steelhead, sturgeon, tuna, 
and Razor clams products manufactured by Skipanon Brand Seafoods October 20 after 
an inspection at Skipanon Brand Seafoods LLC revealed Clostridium botulinum. All 
products were sold at Oregon retail stores, as well as through mail orders. 

Source: http://www.fda.gov/Safetv/Recalls/ucm468000.htm 

11. October 20, U.S. Food and Drug Administration - (Washington) Dungeness Seaworks 
is voluntarily recalling all canned seafood products because of possible health risk. 
Sequim, Washington-based Dungeness Seaworks voluntarily recalled its canned 
albacore tuna manufactured by Skipanon Brand Seafoods LLC October 20 after an 
inspection at Skipanon Brand Seafoods LLC revealed positive traces of Clostridium 
botulinum. The products were shipped to farms and retail stores in Washington. 

Source: http://www.fda.gov/Safetv/Recalls/ucm468219.htm 

12. October 20, Sunbury Daily Item - (Pennsylvania) Factory fire damage estimated at 
$3 million. Fire officials reported October 18 that the Sun-Re Cheese Co., halted 
production indefinitely at its Sunbury facility after a 36-inch exhaust fan prompted an 
accidental fire, causing at least $3 million in damages. No injuries were reported. 
Source: http://www.dailyitem.com/news/factory-fire-damage-estimated-at- 
million/article ddaeb2a0-7762-l Ie5-829e-d308el29bb06.html 

13. October 20, U.S. Department of Labor - (Ohio) Food manufacturer exposes workers 
to amputation hazards. The Occupational Safety and Health Administration 
announced October 20 that it cited Sugar Creek Packing Co., October 16 for 1 repeated 
and 3 serious safety violations at its Fairfield plant following a July complaint 
inspection that revealed employees were exposed to amputation hazards while 
unjamming a machine, among other violations. Proposed Penalties total $45,500. 
Source: https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS 
RELEASES &p id=28932 

For another story, see item 6 
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Water and Wastewater Systems Sector 



14. October 20, KTXL 40 Sacramento - (California) An estimated 200,000 gallons of 
sewage spilled into Arcade Creek. The Sacramento Area Sewer District issued a 
water advisory and posted signs along Arcade Creek in Citrus Heights October 19 after 
an estimated 200,000 gallons of sewage leaked into the creek due to a bypass pipe 
failure during a creek protection project. 

Source: http://fox40.com/2015/10/20/an-estimated-200000-gallons-of-sewage-spilled- 
into-arcade-creek/ 

15. October 20, South Florida Sun-Sentinel - (Florida) Sewage contamination advisory 
issued for Fort Lauderdale neighborhood. Fort Lauderdale city officials issued a 
precautionary water advisory October 20 until further notice for canals in the area and 
warned the public to avoid swimming, fishing, or other water-related activities while 
crews repaired a broken sewage pipe. 

Source: http://www.sun-sentinel.com/local/broward/fl-fort-lauderdale-water- 
contamination-20 151 020-story.html 



Healthcare and Public Health Sector 



16. October 20, U.S. Food and Drug Administration - (International) Downing Labs, 

LLC issues voluntary nationwide recall of all sterile compounded products due to 
lack of sterility assurance. Texas-based Downing Labs, LLC issued a voluntary recall 
October 20 for all lots of its sterile compounded and packaged products due to potential 
contamination issues resulting from a lack of sterility assurance. The products were 
distributed throughout the U.S. and the U.K. between April 20 and September 15. 
Source: http://www.fda.gov/Safety/Recalls/ucm468215.htm 

Government Facilities Sector 

17. October 21, Cincinnati Enquirer - (Ohio; Kentucky) 6 NKY, Greater Cincy schools 
get bomb threats. Authorities are investigating after 15-20 threats were called into 
schools throughout Ohio and northern Kentucky, prompting evacuations at 6 schools 
October 20. Police searched the buildings and cleared the scene once nothing 
suspicious was found. 

Source: http://www.cincinnati.com/storv/news/2015/10/20/police-bomb-threat-called- 
into-wilson-elementary/74262344/ 

18. October 20, San Diego Union-Tribune - (California) Liquid bleach spill near Santee 
school. An October 20 liquid bleach spill at the Cameron Family YMCA in Santee, 
California, caused 81 students and adults to be transported to area hospitals for 
treatment following complaints of a chemical smell and burning sensation in their eyes. 
A HAZMAT crew investigated and cleared the scene once they determined that there 
was no public health risk. 

Source: http://www.sandiegouniontribune.com/news/2015/oct/20/possible-chemical- 
spill-at-santee-school/ 
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19. October 20, WXIN 59 Indianapolis - (Indiana) 10 Bloomington students hospitalized 
in Lawrence County bus crash. An October 20 accident involving a Harmony 
Schools’ bus sent 10 students to area hospitals when the tire on the bus blew out, 
causing it to go into the median, turn onto its side, and slide partially into the 
northbound lanes of State Road 37 in Lawrence County. 

Source: http ://fox5 9 .com/20 15/1 0/20/ten-students-hospitalized-in-lawrence-count y- 
bus-crash/ 

20. October 20, Long Island Newsday - (New York) 3 teens charged with breaking into 
Commack schools’ computer system, police say. Suffolk County police charged 
three Commack High School senior for allegedly breaking into the district’s computer 
system and changing class schedules for approximately 300 students in May and June. 
The students obtained the log in information of administrators by installing a device on 
a computer that tracked keystrokes. 

Source: http://www.newsday.com/long-island/suffolk/daniel-soares-erick-vaysman- 
alex-mosquera-broke-into-commack-schools-computer-system-cops-say- 1 .10987167 

Emergency Services Sector 

Nothing to report 

Information Technology Sector 

21. October 21, Securityweek - (International) Flaws in Apple productivity apps expose 
users to attacks. Apple recently released updates addressing input validation 
vulnerabilities related to how malicious documents are parsed in Keynote, Pages, 
Numbers, and iWork for iOS 2.6 which could have allowed an Extensible Markup 
Language (XML) External Entity (XXE) attack potentially leading to disclosure of 
data, denial-of-service (DoS), or other impacts, as well as memory corruption issues 
that could lead to unexpected termination of applications or arbitrary code execution. 
Source: http://www.securityweek.com/flaws-apple-productivitv-apps-expose-users- 
attacks 

22. October 21, Threatpost - (International) Oracle quarterly security update patches 
154 vulnerabilities. Oracle released a quarterly patch addressing 154 security issues in 
54 products, including 24 vulnerabilities in Java SE, 16 remotely exploitable bugs in 
Fusion Middleware, and 7 in Oracle Database, among others. Eighty-four of the 
patches address vulnerabilities that may be remotely exploitable without authentication. 
Source: https://threatpost.com/oracle-quarterlv-security-update-patches-154- 
vulnerabilities/1 151 20/ 

23. October 21, The Register - (International) ‘10-second’ hack jogs Fitbits into 
malware-spreading mode. Security researchers from Fortinet discovered a 
vulnerability in Fitbit devices in which attackers within a close proximity could use 
Bluetooth to deliver fully persistent malware within 10 seconds, which could then 
infect a computer once the device is synchronized. 

Source: http://www.theregister.co.uk/2015/10/21/fitbit hack/ 
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24. October 21, Softpedia - (International) Western Digital My Passport hard drives 
come with a slew of security holes. Security researchers published findings on the 
International Association for Cryptologic Research Web site revealing that attackers 
could use brute force attacks to bypass built-in encryption and password-based 
authentication in Western Digital My Passport hard drives, and that attackers could use 
all Western Digital devices’ firmware update mechanisms to install malicious code via 
“evil maid” and “badUSB” attacks. 

Source: http://news.softpedia.com/news/western-digital-mv-passport-hard-drives- 
come-with-a-slew-of-security-holes-494990.shtml 

25. October 21, Softpedia - (International) Firefox FindMyDevice service lets hackers 
wipe or lock phones, change PINs. Researchers discovered a flaw in Mozilla’s “Find 
My Device” service for devices running the Firefox operating system (OS) in which a 
hacker could remotely lock device screens, make devices ring, and wipe all device data 
via clickjacking-enabled cross-site request forgery (CSRF) attacks. The attack requires 
the user to be logged in to the service with their Firefox account. 

Source: http://news.softpedia.com/news/firefox-findmvdevice-service-lets-hackers- 
wipe-or-lock-phones-change-pins-495003.shtml 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert. gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 



26. October 20, U.S. Federal Communications Commission - (Alaska) FCC fines Alaskan 
company over $600,000 for cell tower. General Communications Inc., the parent 
company of The Alaska Wireless Network, agreed to pay $620,500 in a settlement 
reached with the U.S. Federal Communications Commission (FCC) October 20 
resolving allegations that the company failed to register 118 cellular communication 
facilities through the FCC’s Antenna Structure Registration system and failed to 
properly light 3 facilities to comply with flight safety rules. 

Source: https://www.fcc.gov/document/fcc-fines-gci-over-600000-cell-tower- 
violations-Q?contrast 



For additional stories, see items 21 and 25 

Commercial Facilities Sector 

27. October 21, WHIO 7 Dayton - (Ohio) Best Buy reopens today after Monday fire. A 
Best Buy Corporate official reported October 21 that its Best Buy store near Dayton 
Mall in Miami Township, Ohio, was scheduled to reopen October 21 after an October 
19 fire prompted the evacuation and closure of the facility while crews cleaned and 
assessed the damage. 
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Source: http://www.whio.com/news/news/local/best-buy-closed-after-fire-near-dayton- 
mall/nn6Wg/ 

28. October 21, CBS News - (Missouri) Reward offered after “alarming pattern” of 
Mo. church fires. Missouri authorities offered a $2,000 reward October 21 for 
information leading to the arrest of an alleged arsonist targeting several churches after 6 
church fires were set within a 3-mile radius in the St. Louis area beginning October 8. 
Officials reported that an accelerant was used in each case to light the front doors and 
an investigation is ongoing. 

Source: http://www.cbsnews.com/news/missouri-st-louis-area-church-fires-targeting- 
black-neighborhoods/ 

29. October 21, Chicago Tribune - (Illinois) Oak Park fire destroys 22-unit apartment 
building. A 4-alarm fire at the Oak Park apartment building in Illinois heavily 
damaged 22 apartment units and prompted residents to evacuate October 20 while 1 1 
fire departments responded to the incident. The fire was extinguished and an 
investigation is ongoing to determine the cause and total amount of damage. 

Source: http://www.chicagotribune.com/suburbs/oak-park/news/ct-oak-park-apartment- 
fire-20151021-story.html 

30. October 20, WABC 7 New York City - (New York) 6-alarm fire tears through 
Chelsea building, prompts evacuations due to collapse concerns. A 6-alarm fire 
October 20 heavily damaged The Dorian condominium complex in New York City, 
which was undergoing renovations, and prompted the evacuation of five surrounding 
buildings while crews contained the fire and assess the total amount of damage. 

Source: http://abc7nv.com/news/fire-tears-through-chelsea-building-prompts- 
evacuations-due-to-collapse-concerns/ 1041733/ 

31. October 19, Minneapolis Star Tribune - (Wisconsin) OSHA fines Ashley Furniture 
for third time this year. The Occupational Safety and Health Administration cited 
Ashley Furniture Industries October 19 for alleged safety violation including failure to 
protect workers from moving machine parts at its Whitehall, Wisconsin upholstery 
furniture plant. Proposed fines total $431,000. 

Source: http://www.startribune.com/osha-fines-ashley-furniture-for-third-time-this- 
year/334309631/ 

Dams Sector 

32. October 20, WWTV 9 Cadillac - (Michigan) Manton Dam to be repaired, city plans 
to drain lake. City officials reported October 20 that it will temporarily drain Lake 
Billings in Wexford County to repair the dam located in front of the lake the week of 
October 26 after water seeped through cracks in the dam. Maintenance on the lake and 
dam is scheduled to be completed by the spring of 2016. 

Source: http://www.9andl0news.com/storv/30310593/manton-dam-to-be-repaired-citv- 
plans-to-drain-lake 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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